Red Hat Enterprise Linux Libreswan Cryptographic Module v4.0
Red Hat®, Inc. - FIPS 140 #2721
Red Hat Enterprise Linux Libreswan Cryptographic Module v4.0 is a software only cryptographic module that provides the IKE protocol version 1 and version 2 key agreement services required for IPSec.
Key facts
- Scheme
- FIPS 140
- Certificate
- 2721
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- August 29, 2016
- Versions
- 4.0
- Caveat
- With module Red Hat Enterprise Linux NSS Cryptographic Module v4.0 validated to FIPS 140-2 under Cert. #2711 operating in FIPS mode and Red Hat Enterprise Linux 7.1 OpenSSL Module validated to FIPS 140-2 under Cert. #2441 operating in FIPS mode
Algorithms
- CVL
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2014-7169CRITICAL 9.8KEVEPSS 99.9%
- CVE-2014-6271CRITICAL 9.8KEVEPSS 100.0%
- CVE-2009-0846HIGH 10.0EPSS 8.9%
- CVE-2000-1220HIGH 10.0EPSS 14.2%
- CVE-2000-0017HIGH 10.0EPSS 8.9%
- CVE-1999-1299HIGH 10.0EPSS 1.8%
- CVE-1999-0894HIGH 10.0EPSS 1.9%
- CVE-1999-0798HIGH 10.0EPSS 1.6%
- CVE-1999-0192HIGH 10.0EPSS 10.0%
- CVE-1999-0042HIGH 10.0EPSS 12.7%
- CVE-1999-0009HIGH 10.0EPSS 29.0%
- CVE-1999-0002HIGH 10.0EPSS 27.9%
- CVE-2011-2897CRITICAL 9.8EPSS 1.9%
- CVE-2011-2717CRITICAL 9.8EPSS 3.9%
- CVE-1999-0043CRITICAL 9.8EPSS 44.6%
- CVE-2011-3188CRITICAL 9.1EPSS 5.0%
- CVE-2011-3191HIGH 8.8EPSS 1.1%
- CVE-2012-1097HIGH 7.8EPSS 0.4%
- CVE-2011-2525HIGH 7.8EPSS 0.5%
- CVE-2011-1145HIGH 7.8EPSS 0.4%
- CVE-2011-4967HIGH 7.5EPSS 2.7%
- CVE-2011-2699HIGH 7.5EPSS 5.6%
- CVE-2010-4805HIGH 7.5EPSS 3.6%
- CVE-2010-4251HIGH 7.5EPSS 3.9%
- CVE-2010-0013HIGH 7.5EPSS 12.5%
- CVE-2009-1837HIGH 7.5EPSS 4.3%
- CVE-2006-5170HIGH 7.5EPSS 4.1%
- CVE-2001-0889HIGH 7.5EPSS 6.4%
- CVE-2001-0690HIGH 7.5EPSS 11.9%
- CVE-1999-1346HIGH 7.5EPSS 1.5%
- CVE-1999-1333HIGH 7.5EPSS 3.4%
- CVE-1999-0041HIGH 7.5EPSS 9.1%
- CVE-1999-0037HIGH 7.5EPSS 3.5%
- CVE-2000-1207HIGH 7.2EPSS 0.4%
- CVE-2000-0170HIGH 7.2EPSS 2.0%
- CVE-2000-0118HIGH 7.2EPSS 0.8%
- CVE-1999-1329HIGH 7.2EPSS 0.4%
- CVE-1999-1182HIGH 7.2EPSS 0.4%
- CVE-1999-0872HIGH 7.2EPSS 0.4%
- CVE-1999-0868HIGH 7.2EPSS 1.5%
- CVE-1999-0769HIGH 7.2EPSS 0.8%
- CVE-1999-0390HIGH 7.2EPSS 0.4%
- CVE-1999-0297HIGH 7.2EPSS 0.4%
- CVE-1999-0130HIGH 7.2EPSS 1.1%
- CVE-1999-0034HIGH 7.2EPSS 1.2%
- CVE-2009-4067MEDIUM 6.8EPSS 2.1%
- CVE-2011-3363MEDIUM 6.5EPSS 0.8%
- CVE-2009-2416MEDIUM 6.5EPSS 1.8%
- CVE-1999-1335MEDIUM 6.4EPSS 1.9%
- CVE-2007-6285MEDIUM 6.2EPSS 0.4%
and 17 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 2441
- 2711
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain